United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark Office 
Address: COMMISSIONER FOR PATENTS 
P.O. Box 1450 

Alexandria, Virginia 223 1 3-1450 
www.uspto.gov 



I ATTORNEY DOCKET NO. | CONFIRMATION NO. | 



APPLICATION NO. 



FILING DATE 



FIRST NAMED INVENTOR 



09/992,582 



11/16/2001 



7590 



04/04/2006 



Steven M. Greenberg Esq 
CHRISTOPHER & WEISBERG PA 
200 East Las Olas Boulevard 
Suite 2040 

Fort Lauderdale, FL 33301 



Stephen M. Hitchen 



7216-1 



8250 



EXAMINER 



] 



WASSUM, LUKE S 



ART UNIT 



PAPER NUMBER 



2167 

DATE MAILED: 04/04/2006 



Please find below and/or attached an Office communication concerning this application or proceeding. 



PTO-90C (Rev. 10/03) 



Office Action Summary 


Application No. 

09/992,582 


Applicant(s) 

HITCHEN ET AL 


Examiner 

Luke S. Wassum 


Art Unit 

2167 





-- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH (S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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DETAILED ACTION 
Response to Amendment 

1. The Applicants' amendment, filed 20 January 2006, has been received, entered into the 
record, and considered. 

2. The amendment consisted of arguments only; no claims were amended. Claims 1-20 remain 
pending in the application. 

The Invention 

3. The claimed invention is a collaborative rights management system for distributing 
documents with digital rights management data appended, thus preserving the integrity of the 
documents by enforcing specific digital rights on a user-by-user basis. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 
102 of this title 3 if the differences between the subject matter sought to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary 
skill in the art to which said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

5. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 (1966), 
that are applied for establishing a background for determining obviousness under 35 U.S.C. 103(a) 
are summarized as follows: 
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1. Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness or 
nonobviousness. 

6. This application currently names joint inventors. In considering patentability of the claims 
under 35 U.S.C. 103(a), the examiner presumes that the subject matter of the various claims was 
commonly owned at the time any inventions covered therein were made absent any evidence to the 
contrary. Applicant is advised of the obligation under 37 CFR 1.56 to point out the inventor and 
invention dates of each claim that was not commonly owned at the time a later invention was made 
in order for the examiner to consider the applicability of 35 U.S.C. 103(c) and potential 35 

U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 

7. Claims 1-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Morinaga et al. 
(U.S. Patent 5,724,578) in view of McCurdy et al. (U.S. Patent Application Publication 
2002/0035697) in view of Graham et al. (U.S. Patent Application Publication 2002/0178271). 

8. Regarding claim 1, Morinaga et al. teaches a collaborative file rights management method 
as claimed, comprising: 

a) identifying a file input/ output (I/O) request to access a file, said file I/O request 
originating in an authoring application (see col. 4, lines 20-23, disclosing that all 
requests for files are received by the file transaction control unit); 
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b) automatically extracting digital rights management data appended to said file (see 

disclosure of the file control block, col. 4, lines 32-61); and 

c) providing said file to said authoring application (see col. 4, lines 32-38; see also col. 7, lines 

35-46). 

Morinaga et al. does not explicitly teach a collaborative file rights management method 
including the step of managing access to said file in said authoring application based upon said 
extracted digital rights management data. 

McCurdy et al., however, teaches a collaborative file rights management method including 
managing access to said file in said authoring application based upon said extracted digital rights 
management data (see paragraphs [0137] through [0140]). 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
perform the claimed intercepting, detecting and quashing steps in cooperation with an authoring 
application, since digital rights management dictates that users with no rights to individual parts of a 
document be prohibited from copying not only an entire document, but the individual protected 
parts (see paragraphs [0137] and [0138]). 

Neither Morinaga et al. nor McCurdy et al. explicitly reaches suppressing said file I/O 

request. 
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Graham et al., however, teaches a system which provides selective access and usage 
management to files available from one or more file systems or sources (see paragraph [0011]) 
through the use of a filter driver, wherein a request dispatched to the file system is intercepted and 
suppressed by the filter driver, and wherein the filter driver interfaces with the file system and adds 
additional functionality beyond that offered by the existing file system (see paragraphs [0140] and 
[0141]). 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
intercept and suppress file I/O requests in order to implement usage management, since this allows 
clients to access and utilize files without changing the process for accessing files in any way from the 
user's perspective, i.e., users continue to use Network Neighborhood or content management 
software, and other standard applications to access remote storage drives and directories (see 
paragraphs [0138] and [0139]). 



9. Regarding claim 9, Morinaga et al. teaches a collaborative file rights management method 
as claimed, comprising: 

a) identifying a file input/output (I/O) request to save a file, said file I/O request originating 

in an authoring application (see col. 4, lines 20-23, disclosing that all requests for files 
are received by the file transaction control unit); 

b) appending digital rights management to said file (see disclosure of the file control block, 

col. 4, lines 32-61); and 

c) storing said file in fixed storage (see col. 4, lines 44-61; see also col. 7, lines 61-65). 
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Morinaga et al. does not explicitly teach a collaborative file rights management method 
including the step of automatically encrypting the file. 

McCurdy et al., however, teaches a collaborative file rights management method including 
the step of automatically encrypting the file (see paragraph [0016]). 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
automatically encrypt a saved file, since encryption is a well known and widely used technique for 
protecting data and/or files from access by unauthorized users. 

Neither Morinaga et al. nor McCurdy et al, explicitly reaches suppressing said file I/O 

request 

Graham et al., however, teaches a system which provides selective access and usage 
management to files available from one or more file systems or sources (see paragraph [0011]) 
through the use of a filter driver, wherein a request dispatched to the file system is intercepted and 
suppressed by the filter driver, and wherein the filter driver interfaces with the file system and adds 
additional functionality beyond that offered by the existing file system (see paragraphs [0140] and 
[0141]). 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
intercept and suppress file I/O requests in order to implement usage management, since this allows 
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clients to access and utilize files without changing the process for accessing files in any way from the 
user's perspective, i.e., users continue to use Network Neighborhood or content management 
software, and other standard applications to access remote storage drives and directories (see 
paragraphs [0138] and [0139]). 



10. Regarding claim 12, Morinaga et al. teaches a collaborative file rights management system 
as claimed, comprising: 

a) a file security management application configured to intercept operating system messages 

directed to an authoring application (see col. 4, lines 20-23, disclosing that all requests 
for files are received by the file transaction control unit); 

b) a file security filter driver configured to identify file input/output (I/O) requests received 

in a kernel-layer system manager to open a file in said authoring application (see col. 4, 
lines 32-38; see also col. 7, lines 35-46); 

c) said file security driver providing said file to said authoring application (see col. 4, lines 32- 

38; see also col. 7, lines 35-46); 

d) said file security management application extracting digital rights management data 

appended to said file, detecting among intercepted operating system messages 
operating system messages directed to authoring applications which can be limited 
according to digital rights specified in said extracted digital rights management data 
and quashing said detected events where said digital rights management data prohibits 
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execution of said authoring application operations (see disclosure of the file control 
block, col. 4, lines 32-61; see also col. 8, lines 10-16). 

Morinaga et al. does not explicitly teach a collaborative file rights management system 
including the automatic encryption and decryption of the file. 

McCurdy et al., however, teaches a collaborative file rights management method further 
comprising automatically encrypting said file (see paragraph [0016]) and decrypting said file (see 
paragraph [0205]. 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
automatically decrypt a retrieved file, since encryption/decryption is a well known and widely used 
technique for protecting data and/or files from access by unauthorized users, and decryption is 
necessary for an authorized user to access an encrypted file. 

Neither Morinaga et al. nor McCurdy et al. explicitly reaches suppressing said file I/O 

request. 

Graham et al., however, teaches a system which provides selective access and usage 
management to files available from one or more file systems or sources (see paragraph [0011]) 
through the use of a filter driver, wherein a request dispatched to the file system is intercepted and 
suppressed by the filter driver, and wherein the filter driver interfaces with the file system and adds 
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additional functionality beyond that offered by the existing file system (see paragraphs [0140] and 
[0141]). 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
intercept and suppress file I/O requests in order to implement usage management, since this allows 
clients to access and utilize files without changing the process for accessing files in any way from the 
user's perspective, i.e., users continue to use Network Neighborhood or content management 
software, and other standard applications to access remote storage drives and directories (see 
paragraphs [0138] and [0139]). 

11. Regarding claim 13, Morinaga et al. teaches a machine readable storage having stored 
thereon a computer program for managing digital rights in a collaborative file, said computer 
program comprising a routine set of instructions for causing the machine to perform the steps of: 

a) identifying a file input/output (I/O) request to access a file, said file I/O request 

originating in an authoring application (see col. 4, lines 20-23, disclosing that all 
requests for files are received by the file transaction control unit); 

b) automatically extracting digital rights management data appended to said file (see 

disclosure of the file control block, col. 4, lines 32-61); and 

c) providing said file to said authoring application (see col. 4, lines 32-38; see also col. 7, lines 

35-46). 
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Morinaga et al. does not explicitly teach a computer program for managing digital rights 
including the step of managing access to said file in said authoring application based upon said 
extracted digital rights management data. 

McCurdy et al., however, teaches a computer program for managing digital rights including 
managing access to said file in said authoring application based upon said extracted digital rights 
management data (see paragraphs [0137] through [0140]). 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
perform the claimed intercepting, detecting and quashing steps in cooperation with an authoring 
application, since digital rights management dictates that users with no rights to individual parts of a 
document be prohibited from copying not only an entire document, but the individual protected 
parts (see paragraphs [0137] and [0138]). 

Neither Morinaga et al. nor McCurdy et al. explicitly reaches suppressing said file I/O 

request. 

Graham et al., however, teaches a system which provides selective access and usage 
management to files available from one or more file systems or sources (see paragraph [0011]) 
through the use of a filter driver, wherein a request dispatched to the file system is intercepted and 
suppressed by the filter driver, and wherein the filter driver interfaces with the file system and adds 
additional functionality beyond that offered by the existing file system (see paragraphs [0140] and 
[0141]). 
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It would have been obvious to one of ordinary skill in the art at the time of the invention to 
intercept and suppress file I/O requests in order to implement usage management, since this allows 
clients to access and utilize files without changing the process for accessing files in any way from the 
user's perspective, i.e., users continue to use Network Neighborhood or content management 
software, and other standard applications to access remote storage drives and directories (see 
paragraphs [0138] and [0139]). 

12. Regarding claims 2 and 14, McCurdy et al., however, teaches a collaborative file rights 
management method and computer program for managing digital rights further comprising 
decrypting said file (see paragraph [0205]. 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
automatically decrypt a retrieved file, since encryption/decryption is a well known and widely used 
technique for protecting data and/or files from access by unauthorized users, and decryption is 
necessary for an authorized user to access an encrypted file. 

13. Regarding claims 3 and 15, Morinaga et al. additionally teaches a collaborative file rights 
management method and computer program for managing digital rights wherein said extracting step 
further comprises: 

a) determining environmental data associated with said I/O request, said environmental data 
comprising at least one of a requestor's identity, a requestor's class, a requestor's 
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computing domain, a requestor's location, a password, a time of day, and a date (see 
registration of the requestor's identity, col. 7, lines 16-21; see also col. 7, lines 35-46); 
and 

extracting an access policy appended to said file (see file control block in Figure 3A, 
including access rights based upon the specific requestor's identity). 

14. Regarding claims 4 and 16, Morinaga et al. additionally teaches a collaborative file rights 
management method and computer program for managing digital rights wherein said providing step 
further comprises: 

a) comparing said access policy to at least a portion of said environmental data (see col. 4, 

lines 32-62; see also col. 7, lines 35-46); 

b) authenticating said file I/O request based upon said comparison (see col. 4, lines 32-62; 

see also col. 7, lines 35-46); and 

c) providing said file to said authoring application only if said I/O request has been 

authenticated (see col. 4, lines 32-62; see also col. 7, lines 35-46). 

15. Regarding claims 5, 10 and 17, Morinaga et al. additionally teaches a collaborative file rights 
management method and computer program for managing digital rights wherein said suppressing 
step further comprises: 

a) posting a responsive message to said authoring application (see col. 8, lines 10-16); and 

b) intercepting an operating system event in said authoring application, said operating system 

event indicating receipt of said responsive message (see col. 8, lines 10-16). 
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Graham et al. additionally teaches quashing further processing of said intercepted operating 
system event (see disclosure that file I/O requests are intercepted through the use of a filter driver, 
wherein a request dispatched to the file system is intercepted and suppressed by the filter driver, and 
wherein the filter driver interfaces with the file system and adds additional functionality beyond that 
offered by the existing file system (see paragraphs [0140] and [0141]). 

16. Regarding claims 6, 11 and 18, Morinaga et al. additionally teaches a collaborative file rights 
management method and computer program for managing digital rights wherein said identifying 
step comprises: 

a) monitoring kernel-level file I/O requests contained in I/O request packets processed in a 

file system manager (see col. 4, lines 20-28); and 

b) detecting said file I/O request to access said file in one of said I/O request packets (see 

col. 4, lines 20-28). 

17. Regarding claims 7, 8, 19 and 20, Morinaga et aL teaches a collaborative file rights 
management method and computer program for managing digital rights substantially as claimed. 

Morinaga et al. does not explicitly teach a collaborative file rights management method and 
computer program for managing digital rights wherein said management step comprises the claimed 
intercepting, detecting and quashing steps in cooperation with an authoring application wherein the 
protected operations are selected from clipboard operations, printing operations, file saving 
operations and file editing operations. 
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McCurdy et aL, however, teaches a collaborative file rights management method and 
computer program for managing digital rights wherein said management step comprises: 

a) intercepting operating system messages in said authoring application (see paragraphs 

[0137] through [0140]); and 

b) detecting among said intercepted operating system messages, operating system messages 

directed to authoring application operations which can be limited according to digital 
rights specified in said extracted digital rights management data, wherein the protected 
operations are selected from clipboard operations, printing operations, file saving 
operations and file editing operations (see paragraphs [0137] through [0140]). 

Graham et aL additionally teaches quashing further processing of said intercepted operating 
system event (see disclosure that file I/O requests are intercepted through the use of a filter driver, 
wherein a request dispatched to the file system is intercepted and suppressed by the filter driver, and 
wherein the filter driver interfaces with the file system and adds additional functionality beyond that 
offered by the existing file system (see paragraphs [0140] and [0141]). 

It would have been obvious to one of ordinary skill in the art at the time of the invention to 
perform the claimed intercepting, detecting and quashing steps in cooperation with an authoring 
application, since digital rights management dictates that users with no rights to individual parts of a 
document be prohibited from copying not only an entire document, but the individual protected 
parts (see paragraphs [0137] and [0138]). 
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Response to Arguments 

18. Applicant's arguments filed 20 January 2006 have been fully considered but they are not 
persuasive. 

19. Regarding the Applicants' argument that the Graham et al. reference fails to teach the 
claimed suppression of a file system request, the examiner respectfully disagrees. 

In paragraphs [0021] and [0022], the Graham et al. reference discloses that the proxy 
system 'mimics the structure and presentation of the content source', and that when a file is 
requested by an end-user of a client device, the request is received by the proxy system which 
selectively provides the requested file as a function of information the proxy system obtains from 
the authentication system and policy system. The reference further teaches that if access to the file 
is granted, the proxy system provides the file. These aspects are elaborated upon in paragraphs 
[0142] and [0143]. 

This disclosure makes plain that the file requests that are intercepted by the filter driver are 
then modified (in accordance with authentication and policy) and the request is then issued by the 
proxy system itself, which then returns the file (or not) to the requesting end-user on the client 
device. This procedure is analogous to that claimed by the Applicants. 



Conclusion 

20. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE MONTHS 
from the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the 
mailing date of this final action and the advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory period will expire on 
the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will the statutory 
period for reply expire later than SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the examiner 



should be directed to Luke S. Wassum whose telephone number is 571-272-4119. The examiner can 
normally be reached on Monday-Friday 8:30-5:30, alternate Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
John E. Breene can be reached on 571-272-4107. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

In addition, INFORMAL or DRAFT communications may be faxed directly to the examiner 
at 571-273-4119. Such communications must be clearly marked as INFORMAL. DRAFT or 
UNOFFICIAL. 

Customer Service for Tech Center 2100 can be reached during regular business hours at 
(571) 272-2100, or fax (571) 273-2100. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR system, 
see http:/ /pair-directuspto.gov. Should you have questions on access to the Private PAIR system, 
contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 




Luke S. Wassum 
Primary Examiner 
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